Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/OgiEz4ZBA9AdQooi8bwuDb6Qxzo.roa
File: OgiEz4ZBA9AdQooi8bwuDb6Qxzo.roa (raw, json)
Hash identifier: vH1xWehFan1sW6jnZ1ZYdYsPD+xBGcSvnrf+tv7+gT0=
Subject key identifier: 3A:08:84:CF:86:41:03:D0:1D:42:8A:22:F1:BC:2E:0D:BE:90:C7:3A
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01856D01CC04108D3116620FA5E39EDB0117
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/OgiEz4ZBA9AdQooi8bwuDb6Qxzo.roa
Signing time: Sun 01 Jan 2023 11:05:12 +0000
ROA not before: Sun 01 Jan 2023 11:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21196
IP address blocks: 80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:cc:04:10:8d:31:16:62:0f:a5:e3:9e:db:01:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 11:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0884cf864103d01d428a22f1bc2e0dbe90c73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:71:ac:3d:35:6a:db:63:c0:0b:71:25:69:
65:02:12:b7:b6:a4:34:06:f6:ea:3e:71:b1:6b:07:
cc:4e:65:1a:af:73:0c:7a:b2:54:c1:25:ff:78:ea:
b3:e4:bf:7f:fa:ec:c1:3e:35:fc:7b:4f:71:83:ac:
e4:e1:20:ae:63:e5:b8:92:c5:0a:31:e0:29:12:fd:
1c:18:8e:b3:22:78:4f:90:6c:78:74:6f:09:33:7f:
59:56:b7:48:78:1c:7d:aa:8a:75:e9:d2:d8:76:24:
fc:5a:ff:b4:57:38:02:a5:d4:57:58:f4:bd:d1:e2:
c9:20:07:39:3e:13:1c:47:9c:55:18:b8:9e:0f:c9:
fc:52:f8:b4:25:63:44:27:14:22:73:41:59:48:bb:
11:83:87:70:9a:44:ae:a0:69:8d:88:f5:66:37:09:
86:35:0f:44:a6:d1:9f:0f:7b:78:6a:04:27:96:b6:
a0:98:c8:be:64:9a:34:3c:01:42:b1:17:fe:26:67:
c9:98:a4:e9:de:98:12:17:e8:8c:08:b4:8e:5d:0f:
9c:a8:d9:76:c0:93:af:66:00:fa:c7:1f:2b:6a:5e:
22:ae:20:7f:97:73:b2:d5:00:f8:e0:2a:c8:e8:03:
52:84:cc:95:0b:10:57:f6:c8:9c:0b:97:8f:8e:86:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:08:84:CF:86:41:03:D0:1D:42:8A:22:F1:BC:2E:0D:BE:90:C7:3A
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/OgiEz4ZBA9AdQooi8bwuDb6Qxzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:a7:11:48:39:be:85:3c:e1:a6:90:8b:ca:e8:68:a0:eb:9d:
56:31:db:72:e2:bb:77:ee:4f:4a:b7:05:82:17:39:be:66:ef:
43:a6:61:57:fa:05:55:65:d1:27:0f:8b:01:a9:00:68:2b:98:
93:06:57:eb:4f:f1:7c:c1:6a:1f:3b:db:a4:79:0e:29:bf:82:
9e:54:8b:f2:38:6c:90:37:e2:28:be:47:e8:e7:52:77:c7:f0:
db:7f:54:2c:7e:c4:4d:e7:78:cf:02:f4:77:44:13:e3:3a:a0:
d7:d8:f5:52:09:cf:79:4b:39:6d:ff:05:68:dc:3e:79:a9:af:
af:02:88:0f:9b:91:32:ab:5f:b8:fe:71:ba:5e:db:20:76:da:
29:6a:83:d6:7a:a4:ed:45:a3:be:43:25:f0:f0:cd:37:1a:2b:
71:d3:d8:af:f9:b7:2f:8d:b0:a6:9a:88:89:3e:c3:95:44:8f:
65:01:7e:11:59:01:77:25:e2:56:ae:15:09:c2:57:f3:09:67:
36:b9:ea:bc:9b:33:59:48:a5:48:1f:bb:0e:e5:a0:49:d2:b0:
00:0d:96:74:2a:6d:96:c9:3b:6f:8d:01:1e:ee:ab:2a:39:f6:
a7:ba:a0:d6:c6:ef:29:6b:01:e6:55:22:c8:28:6d:82:01:1c:
52:04:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:10 2025 by rpki-client